Read the docs

Dell

Records2082All Threatist records
Exploited (KEV)3In CISA KEV
CVSS critical222CVSS 9.0–10.0
CVSS high995CVSS 7.0–8.9

Exploited now

Dell records in CISA KEV
TI-2026-18287 Dell RecoverPoint for Virtual Machines (RP4VMs) Use of Hard-coded Credentials Vulnerability Priority CRITICAL 100KEV 2026-02-18TI-2021-04636 Dell dbutil Driver Insufficient Access Control Vulnerability Priority CRITICAL 97KEV 2022-03-31TI-2020-09565 Treck TCP/IP stack Out-of-Bounds Read Vulnerability Priority HIGH 82KEV 2022-03-03

Components

Products in the NVD configurations · select one to filter the records
Secure Connect Gateway 127 records MEDIUM Data Domain Operating System 100 records MEDIUM Powerscale Onefs 98 records MEDIUM Emc Powerscale Onefs 84 records MEDIUM Wyse Management Suite 70 records MEDIUM Latitude 9410 Firmware 65 records LOW Latitude 5411 Firmware 64 records LOW Latitude 5511 Firmware 64 records LOW

Records

16 records in Recoverpoint For Virtual Machines · all components

TI-2026-18287 CVE-2026-22769 · GHSA-c56r-fcf4-6rp2

Hard-coded credentials in Dell RecoverPoint for Virtual Machines

Priority CRITICAL 100KEV

Dell RecoverPoint for Virtual Machines, versions prior to 6.0.3.1 HF1, contain a hardcoded credential vulnerability.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.13525 Published 2026-02-17 Fixed in 6.0.3.1 HF1 CWE-798
TI-2024-14999 CVE-2024-22426 · GHSA-3prf-2gpr-5j48

Unrestricted file upload in Dell RecoverPoint for VMs

Priority MEDIUM 52

Dell RecoverPoint for Virtual Machines 5.3.x, 6.0.SP1 contains an OS Command injection vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01403 Published 2024-02-16 No fix listed CWE-434
TI-2024-14998 CVE-2024-22425 · GHSA-9m95-x9fm-78hh

Missing brute-force protection in Dell RecoverPoint for VMs

Priority MEDIUM 48

Dell RecoverPoint for Virtual Machines 5.3.x, 6.0.SP1 contains a brute force/dictionary attack vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00458 Published 2024-02-16 No fix listed CWE-307
TI-2016-05698 CVE-2016-6650 · GHSA-vghq-q8x3-xh2x

Information disclosure in EMC RecoverPoint versions prior to 5.0 and EMC RecoverPoint for…

Priority LOW 36

EMC RecoverPoint versions prior to 5.0 and EMC RecoverPoint for Virtual Machines versions prior to 5.0 have an SSL Stripping Vulnerability that may potentially be exploited by malicious users to compromise the affected s…

CVSS 3.0HIGH 7.5 Network No auth User interaction EPSS 0.01626 Published 2017-03-21 No fix listed CWE-200
TI-2025-15101 CVE-2025-21105 · GHSA-r29w-ffc3-h4rm

Improper access control in Dell RecoverPoint for VMs

Priority LOW 33

Dell RecoverPoint for Virtual Machines 6.0.X contains a command execution vulnerability.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00157 Published 2025-02-20 No fix listed CWE-284
TI-2019-02746 CVE-2019-3727 · GHSA-56mm-hvp4-m2ff

OS command injection in Dell EMC RecoverPoint

Priority LOW 31

Dell EMC RecoverPoint versions prior to 5.1.3 and RecoverPoint for VMs versions prior to 5.2.0.2 contain an OS command injection vulnerability in the installation feature of Boxmgmt CLI.

CVSS 3.0MEDIUM 6.7 Local High privileges No interaction EPSS 0.00657 Published 2019-05-15 No fix listed CWE-78
TI-2016-05697 CVE-2016-6649 · GHSA-5jfx-7f69-3rjp

Command injection in EMC RecoverPoint and EMC RecoverPoint for Virtual Machines EMC…

Priority LOW 31

EMC RecoverPoint versions before 4.4.1.1 and EMC RecoverPoint for Virtual Machines versions before 5.0 are affected by multiple command injection vulnerabilities where a malicious administrator with configuration privile…

CVSS 3.0MEDIUM 6.7 Local High privileges No interaction EPSS 0.00886 Published 2017-02-03 No fix listed CWE-77
TI-2016-05696 CVE-2016-6648 · GHSA-hjf7-q7xv-wg22

EMC RecoverPoint versions before 4.4.1.1 and EMC RecoverPoint for Virtual Machines…

Priority LOW 21

EMC RecoverPoint versions before 4.4.1.1 and EMC RecoverPoint for Virtual Machines versions before 5.0 are affected by sensitive information disclosure vulnerability as a result of incorrect permissions set on a sensitiv…

CVSS 3.0MEDIUM 4.4 Local High privileges No interaction EPSS 0.00427 Published 2017-02-03 No fix listed CWE-275
Open these records in search →